MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
An administrator is reviewing a request from users who need to analyze attachments in a protected environment before delivery. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
Many candidates confuse Safe Attachments with other Microsoft 365 security features like Safe Links or anti-malware policies, but the question specifically requires a capability that analyzes attachments in a protected environment before delivery, which is uniquely provided by Safe Attachments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Safe Attachments
Safe Attachments is the correct Microsoft 365 Defender capability that detonates email attachments in a virtual, protected environment before delivery. It uses behavioral analysis and machine learning to detect malicious content, ensuring that only safe attachments reach the user's inbox. This directly addresses the requirement to analyze attachments in a protected environment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Safe Attachments
Why this is correct
Safe Attachments is a Microsoft Defender for Office 365 feature that scans and detonates email attachments in a secure, isolated virtual environment before they reach the user. It uses behavioral analysis, machine learning, and real-time threat intelligence to block zero-day malware and malicious files, and it can be enforced through fine-grained policies and dynamic delivery for user safety.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms is an online survey, quiz, and form-building tool designed to collect user input, responses, and feedback. It does not inspect email attachments, perform malware analysis, or provide any security or compliance controls, so choosing Forms to analyze attachments for malicious content would not meet the stated requirement.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is a video hosting and streaming service within Microsoft 365 that lets organizations upload, manage, and play recorded or live video content. Its purpose is media distribution and viewing, not email attachment inspection or threat detection, so it has no role in analyzing attachments for malicious content.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a project and task management application that organizes work into plans, buckets, and tasks, often used with Microsoft Teams. It does not include any email attachment scanning, content detonation, or malware protection capabilities, making it completely unrelated to the security need in the request.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Compliance
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Safe Attachments
Safe Attachments is a Microsoft Defender for Office 365 feature that opens email attachments in a virtual sandbox to detect and block malicious content before they reach your inbox.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.